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This appeal is taken from the Final Office Action mailed July 6, 2010. The Notice of 
Appeal was filed on October 5, 2010. 

I. REAL PARTY IN INTEREST : 

The real party in interest in the above-identified application is: Omnicare, Inc. 

II. RELATED APPEALS AND INTERFERENCES : 

There are no related appeals or interferences of which applicant is aware regarding the 
above-identified application. 

III. STATUS OF CLAIMS : 

Claims 1-9 and 15-16 are pending and are involved in the instant appeal. 
The Final Office Action rejecting these claims was issued on July 6, 2010. 
The Notice of Appeal was filed on October 5, 2010. 



APPEAL BRIEF PURSUANT TO 37 C.F.R. S41.37 



Sir: 
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Claims 1-10 and 15-16 were finally rejected under 35 U.S.C. §103 as being unpatentable 
over Donoho et al. U.S. 7,346,655 in view of Schoenberg U.S. 6,463,417 and Mehring et al. U.S. 
6,609,115. 



IV. STATUS OF AMENDMENTS : 

A first Office Action was issued on September 9, 2008 rejecting claims 1-14. 
An Amendment was filed on January 9, 2009. 

A first Final Office Action was mailed on April 9, 2009 and an after-final Amendment 
was filed on August 24, 2009. 

An Advisory Action was issued on September 28, 2009. A first Notice of Appeal was 
filed on October 6, 2009. 

An Appeal Brief was filed on December 7, 2009. Prosecution was thereafter reopened 
and a new non-final office Action issued March 2, 2010. 

An Amendment was filed March 2, 2010. The Final Office Action from which this 
Appeal is taken was issued July 6, 2010. 

V. SUMMARY OF CLAIMED SUBJECT MATTER ; 

Independent claim 1 claims a method for storing and reporting pharmacy data. The 
pharmacy data may comprise patient demographic information, transaction records and 
prescription information. Specification, paragraph [0018] (p. 7, lines 3-10). The method 
comprises the step of generating by a plurality of pharmacies 12, electronic pharmacy data 18 
comprising medical, financial and transactional information related to pharmaceutical 
transactions and wherein each of the pharmacies 12 operate within a managed care organization 
(MCO). Specification, paragraphs [0017]-[0021] (p. 6, line 18 - p. 8, line 22). 

The method further comprises receiving over a network 30 by a processing center 20 of 
the managed care organization, a data transfer request to transfer respective electronic pharmacy 
data from at least one of the plurality of pharmacies 12 to the processing center 20. The method 
further comprises providing first access security by the processing center in response to the data 
transfer request wherein the first access security includes checking credentials defined by the 
processing center and submitted for authorization by the at least one pharmacy. See 
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specification, paragraph [0026] (p. 10, lines 1-20). In particular, this first access security is 
provided by the access security screen 40 (Fig. 3). 

The method further comprises providing second access security by the processing center 
in case the at least one pharmacy passes the first access security wherein the second access 
security includes, prior to accepting the respective electronic pharmacy data by the processing 
center, checking whether the respective electronic pharmacy meet at least one predefined validity 
requirement defined by the processing center. As discussed in paragraph [0026] (p. 10, line 1- 
20) of the specification, if a proper user name and/or password are received for the purpose of 
transferring data from pharmacy to a processing center 20, access security screen 40 is used to 
review or check any incoming data before accepting the transfer. Example data checks include 
validation of the data source, a data format validity check and an optional check for computer 
viruses. If the data are unacceptable, the transfer is rejected and the pharmacy 12 submitting the 
data is notified of the rejection via communication portion 45. 

The method further comprises receiving, by the processing center, a transfer 18 (Fig. 1) 
of the respective pharmacy data pursuant to compliance with the second access security. See 
specification paragraph [0026] (p. 10, lines 1-20). Thus, there is control and security for the 
inflow of data from the pharmacy to the processing center. 

The method further comprises organizing and structuring the electronic pharmacy data by 
the processing center to format the electronic pharmacy data in accordance with at least one of a 
predetermined protocol and format, storing the processed electronic pharmacy data in a data 
warehouse 50, storing subsets of the processed electronic pharmacy data in a datamart 70, the 
subsets being adapted to meet specific demands of particular requestors in terms of analysis, 
content, presentation and format, by storing a portion of a larger set of data residing in the data 
warehouse thereby to allow preparation of predetermined sets of reports pertinent to the 
particular requestor. See specification, paragraphs [0028]-[0033] (p. 11, lines 8 - p. 13, line 21). 

The method further comprises receiving by the processing center a data request (data 
extraction) from a data requestor to obtain at least a portion of the processed electronic pharmacy 
data, the data requestor having a privilege level identifying the type of data available to the 
requestor (specification, paragraphs [0033]-[0036]), (P- 13 line 5 - p. 14, line 16) providing third 
access security by the processing center in response to the data request wherein the third access 
security includes checking credentials defined by the processing center and submitted for 
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authorization by the data requestor. See specification, paragraph [0032] (p. 12, line 17 - p. 13, 
line 4). In addition to controlling the inflow of data as previously discussed (see "Pharmacy 
Data Flow" of Fig. 3), access screen 40 screens requests for data extraction from processing 
center 20. In the embodiment of Fig. 3, access to the data is preferably limited to a 
predetermined hierarchical group of personnel such as personnel at corporate pharmacies 12, 
personnel at the regional 14 level and corporate 16 level personnel. In the non-hierarchical 
embodiment of Fig. 4, access may be limited to a predetermined group of users 26. 

The method further comprises providing fourth access security by the processing center 
in case the data requestor passes the third access security, wherein the fourth access security 
includes checking whether requested electronic pharmacy data is consistent with the scope of the 
privilege level of the data requestor. See paragraphs [0033] (p. 13, lines 5-21, [0035] (p. 14, 
lines 4-7), security level screen 80. The choices of reports and/or data presented to the requestor 
for selection may vary with the privileges of the requestor. In this embodiment, the display of 
choices presented to a requestor on a computer display includes only choices within the 
particular requestor's scope of privilege. 

The method further comprises formatting the portion of the electronic pharmacy data 
requested by the data requestor into a report pursuant to compliance with the fourth access 
security, a portion of the electronic pharmacy data for the report being developed from the data 
in the data warehouse 50 or the subsets of the data in the datamart 70 and further comprising 
providing the report to the requestor. 

Claim 2 recites that the method further comprises the steps of encrypting the pharmacy 
data before transferring the electronic pharmacy data to the processing center and decrypting 
(100) the electronic pharmacy data by the processing center after the electronic pharmacy data is 
received. 

Claim 3 recites that the electronic pharmacy data are received by an electronic 
communications network (30). 

Claim 4 recites that the requestor requests and receives the report by means of an 
electronic communications network (30). 

Claim 5 recites that the electronic communications network is an intranet. 

Claim 6 recites that the electronic communications network is an Internet. 
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Claim 7 recites that the requestor is selectively allowed access to a greater or lesser 
portion of the electronic pharmacy data based upon predetermined criteria. Paragraphs [0033] 
(p. 13, lines 5-21) - [0036] (p. 13, lines 8-16). 

Claim 8 recites that the method further provides the step of checking the electronic 
pharmacy data for defects before storing it. (Validation, paragraph [0026] (p. 10, lines 1-20)). 

Claim 9 recites that the method further comprises the step of encrypting (105) the report 
of the processing center before sending it to the requestor. 

Claim 10 has been canceled. 

Claim 15 recites that the report represents financial performance by an individual 
pharmacy, financial performance by a plurality of pharmacies or a medication review and claim 
16 recites that the processing center formats (90) electronic pharmacy data or the report to 
comply with HIPAA. 

Accordingly, the invention relates to a comprehensive system for transferring pharmacy 
data between pharmacies and the processing center (data inflow) with dual degrees of security 
for the data flow between pharmacy and processing center to ensure 1) the data provider is 
authorized and 2) the data is valid; and 

for transferring the stored and processed data at the processing center to the pharmacy 
(data extraction) with two degrees of security to: 

1) establish that the requestor is authorized to receive the data; and 

2) has the proper privilege level to receive the data. 

VI. GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL : 

The following grounds of rejection are presented for review: 

Claims 1-9 and 15-16 stand rejected under 35 U.S.C. §103 as being unpatentable over 
Donoho et al. U.S. 7,346,655 in view of Schoenberg U.S. 6,463,417 and Mehring et al. 

VIL ARGUMENT : 

It is respectfully submitted that the Examiner's rejection of claims 1-9 and 15-16 under 
35 U.S.C. §103 as being unpatentable over Donoho et al. in view of Schoenberg and Mehring 
should be reversed. 
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The Examiner's primary reference is Donoho. Donoho describes a method and apparatus 
whereby a collection of computers and associated communications infrastructure operate 
according to a communications process. This process allows information providers to broadcast 
information to a population of information consumers. The information may be targeted to those 
consumers who have a precisely formulated need for the information. This targeting may be 
based on information that is inaccessible to other communication protocols. For example, under 
other protocols, the targeting requires each potential recipient to reveal sensitive information 
because under other protocols, the targeting requires each potential recipient to reveal 
information obtainable only after extensive calculations using data available only upon intimate 
knowledge of the consumer computer, its contents and local environment. 

According to the Examiner, Donoho teaches a method for storing and reporting pharmacy 
data comprising the steps of generating by a plurality of pharmacies (see Donoho, column 53, 
lines 4-6 and column 92, lines 25-39), each of the pharmacies operating within a managed care 
organization, electronic pharmacy data comprising medical, financial and transactional 
information related to pharmaceutical transactions. The Examiner points to column 53, lines 4-6 
and column 92, lines 25-39. 

The Examiner asserts that Donoho teaches providing a report to a requestor. The 
Examiner refers to column 53, lines 5-6 and column 53, lines 17-20. The Examiner asserts that 
Donoho teaches receiving over a network by a processing center of a managed care organization 
a data transfer request to transfer respective electronic pharmacy data from at least one of the 
plurality of pharmacies. 

The Examiner concedes that Donoho does not teach the remaining elements of 
Applicant's claim 1, in particular starting with providing the first and second access securities. 
However, the Examiner asserts that Schoenberg teaches all remaining steps of Applicant's claim 
1 including providing the first and second access security, the step of receiving the transfer of the 
respective electronic pharmacy data, organizing and structuring the electronic pharmacy data and 
storing the processed electronic pharmacy data in a data warehouse including subsets of the 
electronic pharmacy data. 
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The Examiner further asserts that Schoenberg teaches receiving a data request from a 
data requestor and providing the third and fourth access security, formatting the portion of the 
electronic pharmacy data requested by the data requestor and providing the report to the 
requestor. 

The Examiner's contentions are without merit. The present invention relates to a method 
for storing and reporting pharmacy data. The pharmacy data is generated by a pharmacy and is 
received at the processing center after first and second access security checks. The first access 
security check determines that the pharmacy submitting the data has the proper credentials. The 
second access security check determines that the data itself meets at least one predefined validity 
requirement defined by the processing center. Thus, according to the invention, both the 
credentials of the sending pharmacy and the validity of the data sent are checked before the data 
is stored and processed. 

Assuming that the data meets the first and second access security, it is processed, 
organized, structured and stored in the data warehouse. 

The second aspect of the Applicant's invention is chat once a data request is received to 
request data from the data warehouse, there are third and fourth access securities. The third 
access security checks the credentials of the requestor, i.e., whether the requestor is authorized. 
The fourth access security checks the privilege level of the data requestor so that only data 
consistent with the requestor's privilege level is allowed to be submitted to the requestor. 

Thereafter a report is provided based upon the requestor's privilege level. 

The Examiner relies on the Schoenberg reference for the teachings of the first, second, 
third and fourth access security. However, the Examiner is mistaken about Schoenberg. 
Schoenberg discloses a system for distributing health information. The Examiner asserts that 
Schoenberg teaches the first and second access security. However, the Examiner is incorrect. 
Schoenberg does describe certain forms of access security, but they are not the access security as 
claimed. In column 6, lines 26-50 with reference to Figs. 2 and 3, Schoenberg receives health 
information and generates security access codes 202, (see Fig. 2) and assigns one or more 
security access codes to each of the categories of health information. However, Schoenberg 
does not teach or suggest what Applicant's invention does. Applicant's invention will receive 
and process the information from the pharmacies if it passes the first and second access security. 
In contrast, in the Schoenberg reference, there is no provision for determining whether the 
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information that is received is reliable and whether it should be received and processed in the 
first place, i.e., there is nothing in Schoenberg which teaches or suggests passing first and second 
access securities before the information is received and processed. Schoenberg receives the 
information and then categorizes it and assigns access codes to it so that if a request is later made 
for that information, the request will only be granted if the access codes are met. 

Schoenberg requires access codes to retrieve the information from the system as 
requested by a data requestor. Schoenberg does not teach or suggest verifying the information in 
the first place before it is stored in the system for later retrieval. Thus, Schoenberg fails to teach 
or suggest providing first access security by the processing center in response to the data transfer 
request, wherein the first access security includes checking credentials defined by the processing 
center and submitted for authorization by the at least one pharmacy. The Examiner has confused 
the "data transfer in" portion for the "data transfer out" portion, i.e., Schoenberg does not teach 
or suggest providing first access security for receiving information ("transfer in"), Schoenberg 
merely teaches assigning security codes and then when a request for data transfer ("transfer out") 
is made, checking to see that the user provides the previously provided access code. Thus, at 
most, Schoenberg may suggest the third access security step of the claims, that is, checking 
credentials submitted for authorization by the data requestor. However, Schoenberg suggests 
nothing about providing first access security in order to determine whether the provider of the 
information is entitled to provide the information in the first place. Furthermore, Schoenberg 
does not teach or suggest the second access security step which relates to checking the validity of 
the data itself presented by the data provider. According to the present invention, prior to 
accepting the respective pharmacy data by the processing center, the data is checked to 
determine whether it meets at least one predefined validity requirement defined by the 
processing center. Schoenberg utterly fails to teach or suggest the second access security step. 

The Examiner makes much of the fact that Schoenberg teaches a tiered security access as 
shown in Figs. 2-3 and discussed in column 3, lines 20-52, i.e., that the provider of the 
information can provide high levels of security for data that it wishes to secure at a higher level. 
The Examiner is again confusing the security access when data is retrieved from the system with 
the security access also provided by the present invention for providing data to the system. 
According to the present invention, the provider of the data is checked to determine if it meets a 
first access security and the data itself is checked to determine whether it meets a second access 
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security, i.e., that it is valid data. There is nothing in Schoenberg that teaches the first and 
second access security. 

The Examiner has asserted that Donoho teaches the step of checking that the data meets 
at least one predefined validity requirement, i.e., the second access security step. The Examiner 
points to Donoho, column 21, lines 9-16 in particular, for verification of the integrity of the 
message by computing a functional from the message. The Examiner asserts that this supports 
the teaching of the first access security step. Further, the Examiner cites Schoenberg, column 6, 
lines 26-52 and the table at columns 5-6 as teaching the checking of credentials submitted for 
authorization by the at least one pharmacy. 

The checking of credentials such as user names and passwords described in column 6, 
lines 26-52 and the table in columns 5-6 of Schoenberg relates to the request for data from the 
system. Thus, according to Schoenberg, the access security codes generated originally by the 
patient are checked to determine that the requestor of the information is authorized to receive the 
information. This does not suggest that a first access security step be implemented when the data 
is received, i.e., whether the data received from the pharmacy should be processed and stored in 
the first place. Schoenberg relates to the transfer of data out of the system but does not relate to 
whether the data should be stored in the system in the first place. 

The Examiner asserts that Donoho at column 21, lines 9-16, through its description of a 
digital digest that can be appended to the message for ensuring message integrity, suggests 
Applicant's claimed second access security. However, taken as a whole, Donoho and 
Schoenberg do not teach or suggest Applicant's claim 1 which provides for receiving data, 
checking a first access security and a second access security before storing and processing the 
data and furthermore, providing a third access security and a fourth access security when a 
request for the data that is stored is received. Applicant submits that the combination of Donoho 
and Schoenberg fails to teach or suggest all the steps of Applicant's claim 1. Accordingly, 
Donoho and Schoenberg, taken together, do not render independent claim 1 obvious. 

In reviewing the Examiner's rejection, it appears that the Examiner is applying Mehring 
specifically to address the recitation of the subsets of data that are stored in the data mart. 
However, Applicants submit that the Examiner's rejection still fails to teach or suggest the 
invention. In particular, Applicants submit that the citation of the combined references still fails 
to teach or suggest the invention as claimed. As explained above, Schoenberg, cited by the 
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Examiner, fails to teach or suggest the first and second access security steps of the invention. 
The Examiner admits that Donoho does not teach these steps. However, the Examiner continues 
to insist that Schoenberg teaches the steps of providing the first and second access security. 
However, as explained above, Schoenberg and Donoho taken together fail to teach or suggest the 
steps of providing the first and second access security. Mehring does not add anything to the 
combined teachings of Donoho and Schoenberg that would teach or suggest the first and second 
access security steps. 

The Mehring reference has been cited by the Examiner for the proposition that it teaches 
a method of sorting data into restricted and unrestricted data where the data is sorted into 
multiple levels of restricted data with each requiring another security level to access. The 
Examiner concludes that one of ordinary skill in the art at the time of the invention would have 
found it obvious to combine the method of storing and reporting pharmacy data as taught by 
Donoho with the secure data access taught by Schoenberg with the multiple levels of restricted 
data as taught by Mehring with the motivation to distribute medical information in which the 
medical care provider or pharmacy has quick access to a patient's medical record, but only to the 
information within the medical record that is needed by the user (medical professional, doctor, 
nurse) for the proper treatment of the patient at the time. 

The Examiner's stated conclusion, however, misses the entire point that Applicants have 
been making all along through the prosecution of this application, including on this Appeal. The 
combination of references, and in particular, the Schoenberg reference, fails to teach or suggest 
the steps of providing the first and second access securities. These steps relate not to a request 
for data by a data requestor, which is the province of the third and fourth access securities 
according to the invention, but instead relate to a data transfer request to transfer data from the 
pharmacy into the data warehouse. Schoenberg does not teach or suggest providing access 
securities when a data transfer request into the system is being made. According to the present 
invention, the first and access securities are provided to verify that the transferor is entitled to 
make the transfer of data into the system, not to request data out of the system. Schoenberg only 
relates to providing access securities which are chosen by the patient, see column 6, lines 29-30, 
to ensure that the patient can obtain access to the data that has been previously stored. There is 
nothing in Schoenberg which relates to ensuring in the first place that the data that is being 
stored is being transferred by an entity that has the proper credentials to store the data in the first 
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place and that the data itself that is being stored is valid. This is what the first and second access 
security steps relate to and there is nothing in Schoenberg or in Donoho or Mehring that relates 
to this,. In particular, these steps which are not taught or suggested by the combination of 
references, recite as follows: 

"receiving, over a network by a processing center of the 
managed care organization, a data transfer request to transfer 
respective electronic pharmacy data from at least one of the 
plurality of pharmacies; 

providing first access security by the processing center 
in response to the data transfer request , wherein the first access 
security includes checking credentials defined by the 
processing center and submitted for authorization by the at 
least one pharmacy; and 

providing second access security by the processing 
center in case the at least one pharmacy passes the first access 
security, wherein the second access security includes, prior to 
accepting the respective electronic pharmacy data by the 
processing center, checking whether the respective electronic 
pharmacy data meet at least one predetermined validity 
requirement defined by the processing center." 

It is only after the request is made to transfer data and the first and second access security 
steps are implemented, and passed by the transferor, that the step of "receiving by the processing 
center, a transfer of the respective electronic pharmacy data pursuant to compliance with the 
second access security" is achieved. 

None of these steps is taught or suggested by Schoenberg, taken in combination with 
Donoho and the Mehring references. In short, the combination of references cited by the 
Examiner wholly fails to teach or suggest the data transfer in request and the first and second 
access security steps which enable the data to be received by the processing center. There is no 
teaching or suggestion, accordingly, of the subject matter of the claims in the combination of 
Donoho, Schoenberg and Mehring. 

Accordingly, for the above reasons, it is submitted that the rejection of the claims under 
35 U.S.C. §103, based upon Donoho, Schoenberg and Mehring is improper and should be 
reversed. 
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VIII. CONCLUSION : 

In view of the above, it is respectfully submitted that claims 1-9 and 15-16 are patentable 
over the prior art to Donoho, Schoenberg and Mehring cited and applied by the Examiner under 
35 U.S.C. §103. Accordingly, it is submitted that the Board should reverse the Examiner's 
rejection of the claims. 

Applicant reserves the right to request an oral hearing upon receipt of the Examiner's 
Answer. 

Credit card payment for the required filing fee in the amount of $540.00 (large entity) is 
submitted herewith via EFS-WEB. 

If this Appeal Brief is filed after a shortened statutory time period has elapsed and no 
separate Petition is enclosed, the Commissioner of Patents and Trademarks is petitioned, under 
37 C.F.R. §1.1 36(a), to extend the time for filing a response to the outstanding Office Action by 
the number of months which will avoid abandonment under 37 C.F.R. §1.135. The fee under 37 
C.F.R. §1.17 should be charged to our Deposit Account No. 15-0700. 

In the event the actual fee is greater than the payment submitted or is inadvertently not 
enclosed or if any additional fee during the prosecution of this application is not paid, the Patent 
Office is authorized to charge the underpayment to Deposit Account No. 15-0700. 

THIS CORRESPONDENCE IS BEING Respectfully submitted, 
SUBMITTED ELECTRONICALLY THROUGH 
THE PATENT AND TRADEMARK OFFICE EFS . 

FILING SYSTEM ON December 1,2010 / 4? , 




OSTROLENK FABER LLP 
1180 Avenue of the Americas 



New York, New York 10036-8403 
Telephone: (212) 382-0700 



LCD:fs 
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CLAIMS APPENDIX 

1 . A method for storing and reporting pharmacy data, comprising the steps of: 
generating by a plurality of pharmacies, each of the pharmacies operating within a 

managed care organization, electronic pharmacy data comprising medical, financial and 

transactional information related to pharmaceutical transactions; 

receiving over a network, by a processing center of the managed care organization, a data 

transfer request to transfer respective electronic pharmacy data from at least one of the plurality 

of pharmacies; 

providing first access security by the processing center in response to the data transfer 
request, wherein the first access security includes checking credentials defined by the processing 
center and submitted for authorization by the at least one pharmacy; 

providing second access security by the processing center in case the at least one 
pharmacy passes the first access security, wherein the second access security includes, prior to 
accepting the respective electronic pharmacy data by the processing center, checking whether the 
respective electronic pharmacy data meet at least one predefined validity requirement defined by 
the processing center; 

receiving, by the processing center, a transfer of the respective electronic pharmacy data 
pursuant to compliance with the second access security; 

processing, organizing and structuring the electronic pharmacy data by the processing 
center to format the electronic pharmacy data in accordance with at least one of a predetermined 
protocol and format; 

storing the processed electronic pharmacy data in a data warehouse; 

storing subsets of the processed electronic pharmacy data in a data mart, the subsets 
being adapted to meet specific demands of particular requestors in terms of analysis, content, 
presentation and format, by storing a portion of a larger set of data residing in the data warehouse 
thereby to allow preparation of predetermined sets of reports pertinent to the particular 
requestors; 

receiving by the processing center a data request from a data requestor to obtain at least a 
portion of the processed electronic pharmacy data, the data requestor having a privilege level 
identifying the type of data available to the requestor; 
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providing third access security by the processing center in response to the data request, 
wherein the third access security includes checking credentials defined by the processing center 
and submitted for authorization by the data requestor ; 

providing fourth access security by the processing center in case the data requestor passes 
the third access security, wherein the fourth access security includes checking whether requested 
electronic pharmacy data is consistent with the scope of the privilege level of the data requestor; 

formatting the portion of the electronic pharmacy data requested by the data requestor 
into a report pursuant to compliance with the fourth access security, the portion of the electronic 
pharmacy data for the report being developed from the data in the data warehouse or the subsets 
of the data in the data mart; and 

providing the report to the requestor. 

2. The method of claim 1 , further comprising the steps of: 

encrypting by the respective plurality of pharmacies the pharmacy data before it 
transferring the electronic pharmacy data to the processing center; and 

decrypting the electronic pharmacy data by the processing center after the electronic 
pharmacy data is received. 

3 . The method of claim 1 wherein the electronic pharmacy data are received via an 
electronic communications network. 

4. The method of claim 3, wherein the requestor requests and receives the report by 
means of an electronic communications network. 

5. The method of claim 4 wherein the electronic communications network is an 
intranet. 

6. The method of claim 4 wherein the electronic communications network is the 
internet. 

7. The method of claim 1 , wherein the requestor is selectively allowed access to a 
greater or lesser portion of the electronic pharmacy data based upon predetermined criteria. 
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8. The method of claim 1 , further comprising the step of checking by the processing 
center the electronic pharmacy data for defects before storing it. 



9. The method of claim 1 , further comprising the step of encrypting the report by the 
processing center before sending it to the requestor. 

Claims 10-14 (canceled). 

1 5 . The method of claim 1 , wherein the report represents financial performance by an 
individual pharmacy, financial performance by a plurality of pharmacies, or a medication review. 

1 6. The method of claim 1 , wherein the processing center formats the electronic 
pharmacy data or the report to comply with HIPAA. 
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EVIDENCE APPENDTX 

None. 
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RELATED PROCEEDINGS APPENDIX 

None. 
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